Lucene search
+L

2681 matches found

NVD
NVD
added 2023/02/22 7:15 p.m.27 views

CVE-2023-0964

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function of the file admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

8.1CVSS6.5AI score0.00494EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/22 7:15 p.m.8 views

CVE-2023-0964

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function of the file admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

8.1CVSS5.4AI score0.00494EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/22 7:15 p.m.27 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function of the file admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

4.6CVSS9.7AI score0.00494EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/02/22 6:28 p.m.40 views

CVE-2023-0964 SourceCodester Sales Tracker Management System view_product.php sql injection

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function of the file admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

5CVSS8.7AI score0.00494EPSS
SaveExploits0References2
CVE
CVE
added 2023/02/22 6:28 p.m.69 views

CVE-2023-0964

CVE-2023-0964 affects SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function in file admin/products/view_product.php where manipulating the query parameter id leads to an SQL injection. This allows remote exploitation with high impact to confidentiality, integrity, an...

8.1CVSS6.8AI score0.00494EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/02/22 12:00 a.m.8 views

Sales Tracker Management System SQL注入漏洞

Sales Tracker Management System is a sales tracking management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Sales Tracker Management System version 1.0, which stems from a problem in the file admin/products/viewproduct.php, where manipulation of the paramete...

8.1CVSS6.4AI score0.00494EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/02/22 12:00 a.m.11 views

PT-2023-16648 · Sourcecodester · Sourcecodester Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales Tracker Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Sales Tracker Management System. The issue is related to an unknown function of the file admin/products/view...

8.1CVSS5.9AI score0.00494EPSS
SaveExploits0References6
zdt
zdt
added 2023/02/21 12:00 a.m.302 views

Sales Tracker System 1.0 SQL Injection Vulnerability

Exploit Title: Authenticated SQL Injection on Sales Tracker System Google Dork: NA Date: 21/2/2023 Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html Software Link: download link if availab...

SaveExploits0
Packet Storm
Packet Storm
added 2023/02/21 12:00 a.m.275 views

Sales Tracker System 1.0 SQL Injection

Exploit Title: Authenticated SQL Injection on Sales Tracker System Google Dork: NA Date: 21/2/2023 Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html Software Link: download link if availab...

0.1AI score
SaveExploits0
OSV
OSV
added 2023/02/07 11:15 p.m.6 views

CVE-2023-23026

Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...

6.1CVSS6.5AI score0.00534EPSS
SaveExploits1References1
NVD
NVD
added 2023/02/07 11:15 p.m.15 views

CVE-2023-23026

Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...

6.1CVSS6.2AI score0.00534EPSS
SaveExploits1References1
Prion
Prion
added 2023/02/07 11:15 p.m.15 views

Cross site scripting

Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...

5.8CVSS6.3AI score0.00534EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/07 12:00 a.m.8 views

CVE-2023-23026

Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...

6.6AI score0.00534EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/02/07 12:00 a.m.7 views

Simple Sales Management System 跨站脚本漏洞

Simple Sales Management System is a simple sales management system from the personal developer Carlo Montero. A security vulnerability exists in Simple Sales Management System version 1.0, which can be exploited to execute arbitrary code via the productname and productprice parameters on the...

6.1CVSS6.8AI score0.00534EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/02/07 12:00 a.m.21 views

CVE-2023-23026

Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...

6.3AI score0.00534EPSS
SaveExploits1References1
CVE
CVE
added 2023/02/07 12:00 a.m.61 views

CVE-2023-23026

CVE-2023-23026 is a Cross-Site Scripting (XSS) vulnerability in SourceCodester Oretnom23 Sales Management System 1.0. The issue arises in print.php via the product_name and product_price inputs, allowing an attacker to execute arbitrary code in the context of the victim’s browser. The CVSSv3.1 me...

6.1CVSS6.2AI score0.00534EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/02/06 8:15 p.m.23 views

Cross site scripting

The Drag & Drop Sales Funnel Builder for WordPress plugin before 2.6.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...

4.9CVSS5.4AI score0.00573EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.13 views

The vulnerability of the Pocket Outlook Sync (PocketPC) component of the Oracle Sales for Handhelds module in the Oracle E-Business Suite allows a perpetrator to access, modify, add, or delete protected data.

The vulnerability of the Pocket Outlook Sync PocketPC component of the Oracle Sales for Handhelds component in the Oracle E-Business Suite automation system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to modify, add, ...

7.8CVSS7.3AI score0.00517EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.11 views

The vulnerability of the Core Components of the Oracle Sales Offline sales management tool, a system for automating business operations within the Oracle E-Business Suite, allows an attacker to access, modify, add, or delete protected data.

The vulnerability of the Core Components of the Oracle Sales Offline sales management tool, a part of the Oracle E-Business Suite, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to modify, add, or delete protected data remotely...

7.8CVSS7.3AI score0.00517EPSS
SaveExploits0References2Affected Software2
HackRead
HackRead
added 2023/01/26 12:21 p.m.28 views

Ticketmaster: Taylor Swift ticket sales disrupted by bot-driven attack

By Habiba Rashid Joe Berchtold, president of Ticketmaster's parent company, Live Nation, claims that despite the cyber attack, hackers were not able to illegally obtain any tickets in the November 2022 incident. This is a post from HackRead.com Read the original post: Ticketmaster: Taylor Swift...

1.9AI score
SaveExploits0
Rows per page
Query Builder